Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/1/34352e3136362e35312e302f32342d3234203d3e20323637393532.roa
File:                     34352e3136362e35312e302f32342d3234203d3e20323637393532.roa (raw, json)
Hash identifier:          g7LJpgWGjC8//IJEhKDof2yJdtoSqcB77QQseOm53/k=
Subject key identifier:   96:BA:D5:45:AE:D9:EA:DC:39:26:C7:F4:ED:C9:35:52:F9:14:97:90
Certificate issuer:       /CN=1BCF2B0381F2F2C46F0C7F24EDF7CC18248AC332
Certificate serial:       2DA19BF7D47BF32708C6F0528F70382248AE1E80
Authority key identifier: 1B:CF:2B:03:81:F2:F2:C4:6F:0C:7F:24:ED:F7:CC:18:24:8A:C3:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BCF2B0381F2F2C46F0C7F24EDF7CC18248AC332.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/1/34352e3136362e35312e302f32342d3234203d3e20323637393532.roa
Signing time:             Thu 18 Apr 2024 13:28:22 +0000
ROA not before:           Thu 18 Apr 2024 13:23:22 +0000
ROA not after:            Thu 17 Apr 2025 13:28:22 +0000
asID:                     267952
IP address blocks:        45.166.51.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a1:9b:f7:d4:7b:f3:27:08:c6:f0:52:8f:70:38:22:48:ae:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BCF2B0381F2F2C46F0C7F24EDF7CC18248AC332
        Validity
            Not Before: Apr 18 13:23:22 2024 GMT
            Not After : Apr 17 13:28:22 2025 GMT
        Subject: CN=96BAD545AED9EADC3926C7F4EDC93552F9149790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:32:03:a3:c7:10:d5:78:ad:52:ff:32:51:3c:
                    b6:42:16:be:bc:04:21:93:36:ac:5d:ae:01:65:a1:
                    3c:73:6a:b3:f8:c5:5a:3c:52:6f:e1:5e:15:5b:2c:
                    17:4f:f4:58:e1:ae:9e:0c:e6:95:d1:0a:b1:65:bd:
                    8f:a0:db:2e:77:a5:df:96:c1:3d:fe:2d:8c:3b:6c:
                    89:9c:af:0e:a2:e8:f3:21:1a:97:1b:09:c1:5c:80:
                    3e:91:3b:85:d9:c2:36:84:b1:ef:4d:23:5d:10:62:
                    91:3f:24:d4:15:13:c3:01:04:22:ad:b8:dc:84:b1:
                    1e:a8:2c:7d:b7:5b:b5:6c:80:89:c3:c0:97:04:e5:
                    13:06:2b:5b:14:3e:5c:12:e0:bd:4d:75:c6:b9:d7:
                    dc:a0:74:a9:2c:94:2f:93:ff:0d:0d:0d:bd:6b:82:
                    08:df:dd:ab:a1:ac:79:6b:63:f3:81:65:11:88:d7:
                    35:49:ae:d8:f3:4e:26:d5:66:46:4f:aa:37:e4:2e:
                    f0:80:e4:d5:8f:d7:5b:f0:9c:91:62:16:09:87:4e:
                    71:40:05:c2:cd:e0:f1:50:44:b5:c7:47:fb:44:79:
                    45:c2:06:23:cc:42:cb:cf:cf:d7:3f:33:70:6c:45:
                    ee:24:a7:04:c0:61:ff:d2:0c:62:a1:fd:d7:41:cc:
                    77:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:BA:D5:45:AE:D9:EA:DC:39:26:C7:F4:ED:C9:35:52:F9:14:97:90
            X509v3 Authority Key Identifier:
                keyid:1B:CF:2B:03:81:F2:F2:C4:6F:0C:7F:24:ED:F7:CC:18:24:8A:C3:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/1/1BCF2B0381F2F2C46F0C7F24EDF7CC18248AC332.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BCF2B0381F2F2C46F0C7F24EDF7CC18248AC332.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/1/34352e3136362e35312e302f32342d3234203d3e20323637393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:d5:69:74:78:81:74:13:a3:45:2c:5b:57:96:8b:41:ef:6b:
         c2:df:af:aa:2c:fc:b6:76:f5:71:c6:15:68:c5:f3:65:f8:59:
         4a:73:1b:9c:96:22:24:8c:ab:52:98:59:3b:90:6d:ee:d0:fa:
         a3:23:ec:46:53:ca:7c:9c:a6:e7:a1:1d:56:2c:38:f4:74:18:
         f1:23:d8:bc:15:02:5c:c5:0e:10:15:2c:d3:3c:5f:7e:9c:3a:
         21:8f:e6:5f:87:d7:2a:44:83:23:96:b8:cb:2a:75:d0:a8:c7:
         1a:ce:9f:d7:44:60:ae:84:0d:d3:c2:71:f5:cc:1b:10:68:ae:
         21:3e:79:e7:df:65:86:cb:b9:8d:8c:9b:a9:96:11:25:b3:c0:
         83:3d:d7:bb:45:28:77:f7:3a:99:c1:4d:61:04:33:f5:1d:8f:
         91:e9:cc:cf:37:bf:70:8b:31:94:e1:2e:b3:6f:b1:7f:af:36:
         bc:1d:12:68:7a:77:61:b9:be:75:93:09:8c:3f:e8:9c:21:ea:
         67:4a:39:b6:64:1b:8f:16:0f:56:3d:25:03:a3:d4:8f:a6:9a:
         36:05:7c:f0:45:9c:41:3d:aa:86:2b:51:7e:99:dd:69:f4:2d:
         dc:28:43:e3:71:e9:23:62:fc:02:e4:5a:94:aa:63:fe:a4:9c:
         1f:db:f9:e7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULaGb99R78ycIxvBSj3A4IkiuHoAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUJDRjJCMDM4MUYyRjJDNDZGMEM3RjI0RURGN0NDMTgy
NDhBQzMzMjAeFw0yNDA0MTgxMzIzMjJaFw0yNTA0MTcxMzI4MjJaMDMxMTAvBgNV
BAMTKDk2QkFENTQ1QUVEOUVBREMzOTI2QzdGNEVEQzkzNTUyRjkxNDk3OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlMgOjxxDVeK1S/zJRPLZCFr68
BCGTNqxdrgFloTxzarP4xVo8Um/hXhVbLBdP9Fjhrp4M5pXRCrFlvY+g2y53pd+W
wT3+LYw7bImcrw6i6PMhGpcbCcFcgD6RO4XZwjaEse9NI10QYpE/JNQVE8MBBCKt
uNyEsR6oLH23W7VsgInDwJcE5RMGK1sUPlwS4L1Ndca519ygdKkslC+T/w0NDb1r
ggjf3auhrHlrY/OBZRGI1zVJrtjzTibVZkZPqjfkLvCA5NWP11vwnJFiFgmHTnFA
BcLN4PFQRLXHR/tEeUXCBiPMQsvPz9c/M3BsRe4kpwTAYf/SDGKh/ddBzHfLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUlrrVRa7Z6tw5Jsf07ck1UvkUl5AwHwYDVR0j
BBgwFoAUG88rA4Hy8sRvDH8k7ffMGCSKwzIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFRuV3JjdmR5Y21aNjY5aUtaRnJ1anlITGhiUHR3TjZrWjMzNHdTNFFW
TEwvMS8xQkNGMkIwMzgxRjJGMkM0NkYwQzdGMjRFREY3Q0MxODI0OEFDMzMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCQ0YyQjAzODFGMkYyQzQ2
RjBDN0YyNEVERjdDQzE4MjQ4QUMzMzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hUbldyY3ZkeWNtWjY2OWlLWkZydWp5SExoYlB0d042a1ozMzR3UzRRVkxMLzEv
MzQzNTJlMzEzNjM2MmUzNTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzkzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALaYzMA0GCSqGSIb3DQEBCwUAA4IBAQB11Wl0eIF0
E6NFLFtXlotB72vC36+qLPy2dvVxxhVoxfNl+FlKcxucliIkjKtSmFk7kG3u0Pqj
I+xGU8p8nKbnoR1WLDj0dBjxI9i8FQJcxQ4QFSzTPF9+nDohj+Zfh9cqRIMjlrjL
KnXQqMcazp/XRGCuhA3TwnH1zBsQaK4hPnnn32WGy7mNjJuplhEls8CDPde7RSh3
9zqZwU1hBDP1HY+R6czPN79wizGU4S6zb7F/rza8HRJoendhub51kwmMP+icIepn
Sjm2ZBuPFg9WPSUDo9SPppo2BXzwRZxBPaqGK1F+md1p9C3cKEPjcekjYvwC5FqU
qmP+pJwf2/nn
-----END CERTIFICATE-----
Generated at Wed Apr 9 10:32:38 2025 by rpki-client